The reported vulnerability is a NULL pointer dereference in MolotovCherry’s Android-ImageMagick7 library. When the library processes a specially crafted image, the pointer may be null, causing the application to crash. This loss of availability is the primary threat, which can be exploited by supplying a malformed image during normal usage. The weakness corresponds to improper handling of input references, matching CWE‑476.

The flaw affects the Android-ImageMagick7 component distributed by MolotovCherry. Any installation of this library with a version earlier than 7.1.2‑10 is vulnerable, as the code paths responsible for image decoding are not protected against null pointer usage.

The CVSS score of 5.5 indicates moderate severity. The EPSS value of less than 1% suggests low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. An attacker would need to deliver a malicious image to the application; thus the attack vector is likely local or remote with user interaction. Based on the description, it is inferred that the vulnerability can be triggered by providing a malformed image during normal library usage.